"Checks DMARC, SPF, and DKIM configuration — identifies email spoofing risk before attackers exploit it."
Email spoofing is one of the most common attack vectors in phishing campaigns. Without DMARC, anyone can send emails that appear to come from your domain — your employees, your customers, your partners will see emails from you that you never sent.
Email Security evaluates three related email authentication standards: SPF (which mail servers are allowed to send from your domain), DKIM (email cryptographic signing), and DMARC (what to do with emails that fail SPF/DKIM — reject, quarantine, or do nothing). It also checks MX records to verify mail server configuration. A missing or permissive DMARC record is a direct spoofing risk.